$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/894d604d-4003-3744-858c-fd7bf4addcb6.roa File: 894d604d-4003-3744-858c-fd7bf4addcb6.roa (raw, json) Hash identifier: mqWBJfK7MIlZebfkm5/xNIhu5KKwL+9y12VnAvrU/NM= Subject key identifier: 98:37:C7:F4:DE:F6:B4:D2:EC:4D:8E:B8:71:C9:3D:A9:8F:D0:98:A8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4A4F89237905894F27320 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/894d604d-4003-3744-858c-fd7bf4addcb6.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 36621 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:a4:f8:92:37:90:58:94:f2:73:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=a9949cf3-7edc-4c82-9b1c-5d4adc8e4e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:22:7e:75:9c:d8:f9:5c:78:3b:56:5b:cf:38: 91:db:c2:f2:cc:dc:36:b0:fd:d1:0a:e4:3b:4b:ea: 14:ad:28:f1:77:b0:53:0f:cf:7d:75:d7:9f:71:eb: 7f:45:b3:26:3d:cf:e4:44:2e:07:1d:f6:ef:18:42: de:60:36:b1:4f:05:16:c9:8b:03:ff:39:04:c6:87: 10:0b:11:ac:5c:1f:df:66:55:d9:ca:19:d7:52:d8: b0:36:85:d1:6a:55:ed:36:f2:63:53:f6:f2:f4:c3: c3:49:4b:c1:8f:b3:04:dd:2f:6a:93:27:59:d1:06: fd:4e:67:ea:80:8c:44:0b:19:42:9a:30:a5:a2:d0: 3a:9b:b8:88:db:3b:a5:bd:ee:0e:da:05:19:ee:80: d7:c0:61:24:4a:e6:d6:43:dd:56:fb:bd:04:99:eb: 9b:1f:ee:46:39:64:12:7e:c1:e8:61:08:c9:ed:df: 02:23:a6:05:bc:58:05:fb:ae:84:d1:77:6b:4b:84: 82:28:36:5f:3a:f7:f1:5a:fe:20:e0:e9:ce:93:4e: 6b:ad:00:94:ca:67:37:85:0e:6a:38:25:5d:c9:28: 1c:aa:d8:e4:d4:4d:31:6e:11:ee:4a:ea:be:ab:69: 46:cd:e3:e4:25:e8:b6:d0:7f:17:90:a6:24:a3:c0: 31:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:37:C7:F4:DE:F6:B4:D2:EC:4D:8E:B8:71:C9:3D:A9:8F:D0:98:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/894d604d-4003-3744-858c-fd7bf4addcb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:5a:e4:e5:d3:05:75:b8:c5:b8:cf:fb:02:5f:1a:29:ed:17: 7e:36:e4:86:ab:04:14:ed:c5:b1:00:1b:d7:83:5c:ea:47:bd: 69:56:66:4d:59:a7:3a:52:ae:67:90:3f:7a:91:e7:b1:db:ca: 9f:0d:98:1d:1a:38:81:dc:79:b6:b8:77:96:8d:be:ca:66:53: 7e:df:a3:b2:30:b3:8c:34:da:57:d8:10:34:89:e4:d1:34:74: 13:5b:a4:5f:2b:c3:ca:77:9e:66:f7:b0:7d:76:5b:fe:e1:48: 04:46:d1:46:d4:ca:6e:82:54:2b:b3:93:45:93:04:aa:9d:cd: 05:da:be:c1:84:7d:04:7b:0e:33:19:ca:fd:c0:a9:5f:75:d7: aa:48:77:8e:b9:28:4c:49:34:39:e4:83:aa:b9:22:8a:4a:56: df:1f:89:ae:3f:0b:5a:79:8e:87:c3:de:b9:ca:b7:31:f3:0a: 69:84:ca:50:d1:7c:35:8d:41:77:34:d4:aa:4b:da:b2:d4:c1: e4:04:c9:f5:c4:a1:c1:11:71:c8:1a:76:41:89:fd:2b:6f:c0: 3f:20:f4:60:45:11:38:4f:29:c1:c7:26:20:22:ec:14:8c:bd: e3:a8:06:97:6d:b2:ab:30:08:4d:d9:f4:19:bf:9a:75:a8:56: f9:68:7f:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtKT4kjeQWJTycyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk YTk5NDljZjMtN2VkYy00YzgyLTliMWMtNWQ0YWRjOGU0ZTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSJ+dZzY+Vx4O1ZbzziR28LyzNw2sP3RCuQ7 S+oUrSjxd7BTD899ddefcet/RbMmPc/kRC4HHfbvGELeYDaxTwUWyYsD/zkExocQ CxGsXB/fZlXZyhnXUtiwNoXRalXtNvJjU/by9MPDSUvBj7ME3S9qkydZ0Qb9Tmfq gIxECxlCmjClotA6m7iI2zulve4O2gUZ7oDXwGEkSubWQ91W+70EmeubH+5GOWQS fsHoYQjJ7d8CI6YFvFgF+66E0XdrS4SCKDZfOvfxWv4g4OnOk05rrQCUymc3hQ5q OCVdySgcqtjk1E0xbhHuSuq+q2lGzePkJei20H8XkKYko8AxvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJg3x/Te9rTS7E2OuHHJPamP0JioMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODk0ZDYwNGQtNDAwMy0z NzQ0LTg1OGMtZmQ3YmY0YWRkY2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpa5OXTBXW4xbjP+wJfGintF3425IarBBTtxbEAG9eDXOpHvWlWZk1Z pzpSrmeQP3qR57Hbyp8NmB0aOIHceba4d5aNvspmU37fo7Iws4w02lfYEDSJ5NE0 dBNbpF8rw8p3nmb3sH12W/7hSARG0UbUym6CVCuzk0WTBKqdzQXavsGEfQR7DjMZ yv3AqV9116pId465KExJNDnkg6q5IopKVt8fia4/C1p5jofD3rnKtzHzCmmEylDR fDWNQXc01KpL2rLUweQEyfXEocERccgadkGJ/StvwD8g9GBFEThPKcHHJiAi7BSM veOoBpdtsqswCE3Z9Bm/mnWoVvlof3c= -----END CERTIFICATE-----Generated at Thu Mar 26 17:21:16 2026 by rpki-client